"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
After upgrading to Enterprise Console version 5.2 the following services fail to start.
If you attempt to start any of the services from the Windows Services list they fail with the following error:
The [Service Name] service on Local Computer started and then stopped. Some services stop automatically if they have no work to do, for example, the Performance Logs and Alerts service.
First seen in Enterprise Console 5.2.0
As part of the upgrade of the management server role, UpgradePatchDB.exe has not successfully upgraded the new SOPHOSPATCH52 database.
See the 'Technical Information' section below for more information.
The reason for the failure should be checked using the Windows event log and once confirmed you can manually upgrade the Sophos Patch database. Follow the section below to confirm the issue.
In the Windows Application event log (Start | Run | Type: eventvwr.msc | Press return) check for the following errors from 'Event Source' Sophos Patch':
Description: PID [Number] : TID [Number] Service could not be started. -- System Exception Details -- Message: Default upgrade status detected. Type: Exception Source: Stack Trace: Help Link: -- Evidence At Publish -- For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
If you see this error: continue with section two below.
At the Sophos management server computer:
SQLCMD -E -S SQLSERVER\SOPHOS
1> SELECT * FROM SYSDATABASES WHERE NAME LIKE "%PATCH%" 2> GO
1> USE SOPHOSPATCH52 2> UPDATE Upgrade 3> SET UpgradeStatus=2 WHERE ID=1 4> GO
"C:\Program Files\Sophos\Enterprise Console\UpgradePatchDB.exe" -sourceVersion=51 -debug
"C:\Program Files (x86)\Sophos\Enterprise Console\UpgradePatchDB.exe" -sourceVersion=51 -debug
Note: Running the commands in point one above will carry out the steps detailed in the Technical Information section below.
When upgrading an installation from Enterprise Console 5.1, the following events should take place:
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.